This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/w1foq9jocPkzjuRfqZnMhCrFgoc.roa File: w1foq9jocPkzjuRfqZnMhCrFgoc.roa (raw, json) Hash identifier: hIQWq+AttaYWUx35iksIxWbbZH+Dj7yV7Nlpv0YA06Y= Subject key identifier: C3:57:E8:AB:D8:E8:70:F9:33:8E:E4:5F:A9:99:CC:84:2A:C5:82:87 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019AC1022D1420194D0E1391C52E8E8D4CA7 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/w1foq9jocPkzjuRfqZnMhCrFgoc.roa Signing time: Wed 26 Nov 2025 16:32:16 +0000 ROA not before: Wed 26 Nov 2025 16:32:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41095 IP address blocks: 2a06:1180:10::/48 maxlen: 48 2a06:1184:55::/48 maxlen: 48 2a06:35c4:100::/48 maxlen: 48 2a06:dfc0::/29 maxlen: 32 2a07:bb40::/29 maxlen: 32 2a09:17c0:b19a::/48 maxlen: 48 2a09:17c1:11d::/48 maxlen: 48 2a0a:2d00:10::/48 maxlen: 48 2a0a:2d00:20::/48 maxlen: 48 2a0a:2d07:fc4c::/48 maxlen: 48 2a0c:7881:100::/48 maxlen: 48 2a0c:7882:11::/48 maxlen: 48 2a0e:15c0:6::/48 maxlen: 48 2a0e:15c7:2d::/48 maxlen: 48 2a0e:1a83:1::/48 maxlen: 48 2a0e:f600:2::/48 maxlen: 48 2a0e:f600:14::/48 maxlen: 48 2a0e:f603:1312::/48 maxlen: 48 2a0f:1200:11::/48 maxlen: 48 2a0f:1200:100::/48 maxlen: 48 2a0f:1581:10::/48 maxlen: 48 2a0f:2d82:100::/48 maxlen: 48 2a0f:31c3:100::/48 maxlen: 48 2a0f:3d80:2::/48 maxlen: 48 2a0f:7d00:10::/48 maxlen: 48 2a0f:7d06:101::/48 maxlen: 48 2a0f:dd40::/29 maxlen: 32 2a0f:df46:100::/48 maxlen: 48 2a0f:e1c0:acab::/48 maxlen: 48 2a0f:e202:fc06::/48 maxlen: 48 2a0f:e6c2:100::/48 maxlen: 48 2a0f:e7c4:22::/48 maxlen: 48 2a0f:e7c7:95::/48 maxlen: 48 2a0f:e842:100::/48 maxlen: 48 2a0f:e844:8642::/48 maxlen: 48 2a0f:ea00::/29 maxlen: 32 2a0f:ea43:10::/48 maxlen: 48 2a10:30c0::/29 maxlen: 32 2a10:6400::/29 maxlen: 32 2a10:67c2:1::/48 maxlen: 48 2a12:ac43:acab::/48 maxlen: 48 2a12:ecc4:2213::/48 maxlen: 48 2a13:18c6:99::/48 maxlen: 48 2a13:8c86:140::/48 maxlen: 48 2a13:9282:100::/48 maxlen: 48 2a13:9d00::/29 maxlen: 32 2a13:c500::/29 maxlen: 32 2a13:c900:44::/48 maxlen: 48 2a13:c900:55::/48 maxlen: 48 2a13:e102:10::/48 maxlen: 48 2a13:fd00::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 16:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c1:02:2d:14:20:19:4d:0e:13:91:c5:2e:8e:8d:4c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Nov 26 16:32:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c357e8abd8e870f9338ee45fa999cc842ac58287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e8:f6:a1:ca:3c:c0:5f:e2:53:d1:2e:94:4d: bd:7a:ff:b4:29:5c:f0:b8:2a:9e:28:e0:93:e4:07: a5:27:c9:db:cb:d6:03:e6:cb:be:1a:5e:0a:22:36: a1:88:29:67:9b:6a:8e:7e:14:78:07:75:e1:7e:6f: a1:46:0c:86:1a:e0:22:7f:9e:34:f0:3b:c5:51:b5: f9:6b:22:0e:f5:af:75:cf:08:8e:af:a7:62:77:02: b7:0e:f1:85:a8:10:ea:83:df:e2:92:2c:70:61:35: d1:84:ac:98:6e:be:f6:ca:e4:21:1c:f0:1a:ff:6c: 1f:0a:71:08:a0:08:1a:5a:28:ea:f7:74:fb:04:d4: 17:27:d7:5f:6e:59:05:a5:47:32:09:72:68:c2:38: f0:04:76:eb:3f:a1:0e:02:c8:c5:b0:42:b3:52:53: 5c:6b:e7:0f:74:3f:19:a0:5e:c7:80:b0:02:e7:7f: 2a:f6:fb:3e:77:02:53:5f:d3:5c:31:08:2d:ca:5c: 79:1f:0f:65:ab:fe:61:de:20:4a:a2:21:34:d3:4b: d2:36:12:7b:ac:0c:1a:64:3c:5d:d5:28:f7:74:51: 5f:a4:26:0c:cd:17:d1:38:d4:1d:4f:ff:ed:22:96: 7d:b2:29:cc:69:ae:eb:e3:94:97:a4:97:f7:5c:4f: 2f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:57:E8:AB:D8:E8:70:F9:33:8E:E4:5F:A9:99:CC:84:2A:C5:82:87 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/w1foq9jocPkzjuRfqZnMhCrFgoc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1180:10::/48 2a06:1184:55::/48 2a06:35c4:100::/48 2a06:dfc0::/29 2a07:bb40::/29 2a09:17c0:b19a::/48 2a09:17c1:11d::/48 2a0a:2d00:10::/48 2a0a:2d00:20::/48 2a0a:2d07:fc4c::/48 2a0c:7881:100::/48 2a0c:7882:11::/48 2a0e:15c0:6::/48 2a0e:15c7:2d::/48 2a0e:1a83:1::/48 2a0e:f600:2::/48 2a0e:f600:14::/48 2a0e:f603:1312::/48 2a0f:1200:11::/48 2a0f:1200:100::/48 2a0f:1581:10::/48 2a0f:2d82:100::/48 2a0f:31c3:100::/48 2a0f:3d80:2::/48 2a0f:7d00:10::/48 2a0f:7d06:101::/48 2a0f:dd40::/29 2a0f:df46:100::/48 2a0f:e1c0:acab::/48 2a0f:e202:fc06::/48 2a0f:e6c2:100::/48 2a0f:e7c4:22::/48 2a0f:e7c7:95::/48 2a0f:e842:100::/48 2a0f:e844:8642::/48 2a0f:ea00::/29 2a0f:ea43:10::/48 2a10:30c0::/29 2a10:6400::/29 2a10:67c2:1::/48 2a12:ac43:acab::/48 2a12:ecc4:2213::/48 2a13:18c6:99::/48 2a13:8c86:140::/48 2a13:9282:100::/48 2a13:9d00::/29 2a13:c500::/29 2a13:c900:44::/48 2a13:c900:55::/48 2a13:e102:10::/48 2a13:fd00::/29 Signature Algorithm: sha256WithRSAEncryption ad:71:6c:d3:d5:a2:c1:26:d0:17:10:59:fe:e7:2b:94:b4:9b: 34:b6:a3:61:45:f0:03:ac:09:65:7f:56:96:da:10:1a:a7:5b: 96:3c:52:fb:ee:03:2f:d4:a1:5c:bb:0f:39:1f:f6:05:f0:c2: 20:cc:3c:d2:4c:2a:55:12:8b:ac:e0:cc:e3:dc:ec:e3:73:36: c4:df:9d:7c:a1:5c:27:a4:87:a4:17:cf:0e:80:4d:1d:99:92: 3c:12:84:f8:6b:68:31:4e:7d:68:74:85:17:b6:47:3d:b5:e3: 67:49:ca:d7:d4:37:07:9c:54:eb:1a:22:29:da:19:73:6c:fd: b0:92:bd:f0:ff:b7:be:80:ab:5b:62:bb:7c:aa:14:0f:31:96: 2d:10:93:c6:c7:7a:69:61:95:24:ef:17:a8:7e:76:11:70:ae: 29:60:2e:86:99:b8:bc:4f:77:2d:eb:e4:7f:ff:b7:55:6d:a5: 0d:ae:9f:bf:0d:f4:df:24:90:a5:e8:5b:c4:28:a1:dc:cf:36: f2:f9:77:2f:ab:f3:79:76:d5:83:61:32:48:c6:ba:85:b6:25: c8:5b:87:ea:ba:2c:6e:5c:95:8a:4c:1d:9e:95:2b:14:8c:70: 8c:b0:73:ae:de:d0:70:f8:5e:3f:98:19:bc:05:c6:e7:de:5b: d9:30:bc:d3 -----BEGIN CERTIFICATE----- MIIGujCCBaKgAwIBAgISAZrBAi0UIBlNDhORxS6OjUynMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMTI2MTYzMjE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzU3ZThhYmQ4ZTg3MGY5MzM4ZWU0NWZhOTk5Y2M4NDJhYzU4Mjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOj2oco8wF/iU9EulE29ev+0KVzw uCqeKOCT5AelJ8nby9YD5su+Gl4KIjahiClnm2qOfhR4B3Xhfm+hRgyGGuAif540 8DvFUbX5ayIO9a91zwiOr6didwK3DvGFqBDqg9/ikixwYTXRhKyYbr72yuQhHPAa /2wfCnEIoAgaWijq93T7BNQXJ9dfblkFpUcyCXJowjjwBHbrP6EOAsjFsEKzUlNc a+cPdD8ZoF7HgLAC538q9vs+dwJTX9NcMQgtylx5Hw9lq/5h3iBKoiE000vSNhJ7 rAwaZDxd1Sj3dFFfpCYMzRfRONQdT//tIpZ9sinMaa7r45SXpJf3XE8vkwIDAQAB o4IDxjCCA8IwHQYDVR0OBBYEFMNX6KvY6HD5M47kX6mZzIQqxYKHMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvdzFmb3E5am9jUGt6anVSZnFabk1oQ3JGZ29jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIB2gYIKwYBBQUHAQcBAf8EggHJMIIBxTCCAcEEAgACMIIB uQMHACoGEYAAEAMHACoGEYQAVQMHACoGNcQBAAMFAyoG38ADBQMqB7tAAwcAKgkX wLGaAwcAKgkXwQEdAwcAKgotAAAQAwcAKgotAAAgAwcAKgotB/xMAwcAKgx4gQEA AwcAKgx4ggARAwcAKg4VwAAGAwcAKg4VxwAtAwcAKg4agwABAwcAKg72AAACAwcA Kg72AAAUAwcAKg72AxMSAwcAKg8SAAARAwcAKg8SAAEAAwcAKg8VgQAQAwcAKg8t ggEAAwcAKg8xwwEAAwcAKg89gAACAwcAKg99AAAQAwcAKg99BgEBAwUDKg/dQAMH ACoP30YBAAMHACoP4cCsqwMHACoP4gL8BgMHACoP5sIBAAMHACoP58QAIgMHACoP 58cAlQMHACoP6EIBAAMHACoP6ESGQgMFAyoP6gADBwAqD+pDABADBQMqEDDAAwUD KhBkAAMHACoQZ8IAAQMHACoSrEOsqwMHACoS7MQiEwMHACoTGMYAmQMHACoTjIYB QAMHACoTkoIBAAMFAyoTnQADBQMqE8UAAwcAKhPJAABEAwcAKhPJAABVAwcAKhPh AgAQAwUDKhP9ADANBgkqhkiG9w0BAQsFAAOCAQEArXFs09WiwSbQFxBZ/ucrlLSb NLajYUXwA6wJZX9WltoQGqdbljxS++4DL9ShXLsPOR/2BfDCIMw80kwqVRKLrODM 49zs43M2xN+dfKFcJ6SHpBfPDoBNHZmSPBKE+GtoMU59aHSFF7ZHPbXjZ0nK19Q3 B5xU6xoiKdoZc2z9sJK98P+3voCrW2K7fKoUDzGWLRCTxsd6aWGVJO8XqH52EXCu KWAuhpm4vE93Levkf/+3VW2lDa6fvw303ySQpehbxCih3M828vl3L6vzeXbVg2Ey SMa6hbYlyFuH6rosblyVikwdnpUrFIxwjLBzrt7QcPheP5gZvAXG595b2TC80w== -----END CERTIFICATE-----Generated at Fri Dec 5 01:45:33 2025 by rpki-client